2b7b4174cf8a928c7e948a84f8b1888194dbae9bd15e011951e7eee97218ebf1 | Triage

Sharing

General

Target

2b7b4174cf8a928c7e948a84f8b1888194dbae9bd15e011951e7eee97218ebf1
Size

7.1MB
MD5

b2ff98195d64ea34ccf70213a76beef2
SHA1

dc900788568099ef6226e2004e8799a1f29cfaeb
SHA256

2b7b4174cf8a928c7e948a84f8b1888194dbae9bd15e011951e7eee97218ebf1
SHA512

8c83bc1fda368a0baf3557250610291ee26698f26f07ae12f6ff9e5aff7be87fc24b92b14e7b9df2b118e0df18d13c9e5f2dad123f548a3658a22d99c3081f18
SSDEEP

98304:dche4hvsjnWtSfxZu3WTQwFcgdxUFZ9LWEDctV5jIqB4n0hLXR:dSvsjnWcfxZu6LFUZWEDctVBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b7b4174cf8a928c7e948a84f8b1888194dbae9bd15e011951e7eee97218ebf1

Files

2b7b4174cf8a928c7e948a84f8b1888194dbae9bd15e011951e7eee97218ebf1
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

MainExt

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ